The publication by WikiLeaks of documents it says are from the CIA's secret hacking program describe tools that can turn a world of increasingly networked, camera- and microphone-equipped devices into eavesdroppers.
Smart televisions and cars now have on-board computers and microphones, joining the ubiquitous smartphones, laptops and tablets that have had microphones and cameras as standard equipment for a decade. That the CIA has created tools to turn them into listening posts surprises no one in the security community.
Q: How worried should consumers be who have surrounded themselves with these devices?
A: Importantly, the intrusion tools highlighted by the leak do not appear to be instruments of mass surveillance. So, it's not as if everyone's TV or high-tech vehicle is at risk.
"These are tools that appear to be targeted at specific people's (devices) by compromising the software on them - as opposed to tools that decrypt the encrypted traffic over the internet," says Matt Blaze, University of Pennsylvania computer scientist.
"Q: Once devices are compromised they need to be internet-connected in order to share collected intelligence with spies. What can be done to stop that?
A: Not much if you don't want to sacrifice the benefits of the device.
"Anything that is voice-activated or that has voice- and internet-connected functionality is susceptible to these types of attacks," says Robert M Lee, a former US cyberwar operations officer.
That includes smart TVs and voice-controlled information devices like the Amazon Echo, which can read news, play music, close the garage door and turn up the thermostat.
To ensure a connected device can't spy on you, unplug it from the grid and the internet and remove the batteries, if that's possible. Or perhaps don't buy it, especially if you don't require the networked features.
Security experts have found flaws in devices - like WiFi-enabled dolls - with embedded microphones and cameras.
Q: I recently began using WhatsApp and Signal on my smartphone for voice and text communication because of their strong encryption. Can the exploits described in the WikiLeaks documents break them?
A: No. But exploits designed to infiltrate the operating system on your Android smartphone, iPhone, iPad or Windows-based computer can read your messages or listen in on conversations on the compromised device itself, though communications are encrypted in transit.
Q: I'm not a high-value target for intelligence agencies. But I still want to protect myself. How?
A: It may sound boring, but it's vital: Keep all your operating systems patched and up-to-date, and don't click links or open email attachments unless you are sure they are safe.
There will always be exploits of which antivirus companies are not aware until it's too late. These are known as zero-day exploits because no patches are available and victims have zero time to prepare. The CIA, National Security Agency and plenty of other intelligence agencies purchase and develop them.
But they don't come cheap. And most of us are hardly worth it.
